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Amendments to the Claims : 
This listing of claims replaces all prior versions and listings of claims in the application: 

Listing of Claims : 

1 . (currently amended) A method for obtaining data about a transaction in a computer 
system comprising: 

receiving at least one message at each of a plurality of nodes in connection with 
performing a service of said transaction; 

filtering said at least one message at each of said plurality of nodes in accordance with a 
current set of one or more rules producing local filtered data at each of said plurality of nodes; 
and 

processing , at e ach of said plurality of nodoo, said local filtered data producing 
aggregated data about said transaction. 

2. (currently amended) The method of Claim 1, wherein e ach of at l e ast a portion of paid 
the plurality of nodes [is] includes one of: a single instance of a web service, an application 
server, a host computer, a geographical computer site. 

3. (original) The method of Claim 1, wherein at least two nodes of said plurality of nodes 
are associated with performing processing for a single application. 

4. (currently amended) The method of Claim 1, wherein said filtering at each of said 
plurality of nodes is performed [ in r e al tim e] while said each node is servicing a request. 
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5. (original) The method of Claim 4, further comprising: 

collecting said aggregated data from each of said plurality of nodes about said 
transaction. 

6. (original) The method of Claim 4, further comprising: 

collecting said aggregated data from a portion of said plurality of nodes about said 
transaction. 

7. (original) The method of Claim 1, further comprising: 

aggregating XML message data received at each of said plurality of nodes, said plurality 
of nodes being a distributed network of service node peers. 

8. (original) The method of Claim 6, wherein each of said plurality of nodes is an 
application performing an operation in connection with servicing a transaction. 

9. (original) The method of Claim 8, wherein said current set of rules is evaluated in 
accordance with each received message. 

10. (original) The method of Claim 9, further comprising: 

revising said current set of rules at one of said plurality of nodes while said one node is 
servicing a request. 

1 1 . (original) The method of Claim 9, wherein each rule in said current set of rules 
includes a condition portion and an action portion, and the method further comprising: 

evaluating a condition portion of a first rule in accordance with a first received message 
wherein said condition portion evaluates to false and said action portion is not performed; and 

evaluating said condition portion of said first rule in accordance with a second received 
message wherein said condition portion evaluates to true and said action portion is performed. 
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12. (original) The method of Claim 1 1, wherein said action portion includes performing 
at least one of: outputting data to a destination and invoking an application. 

13. (original) The method of Claim 1, wherein a transaction is determined in accordance 
with at least one of: a transaction identifier, a customer identifier, and a timestamp included in 
each of said at least one message. 

14. (original) The method of Claim 13, wherein said processing includes analyzing said 
local filtered data at at least a portion of said plurality of nodes in accordance with a time- 
coherency and key- value pattern matching. 

15. (original) The method of Claim 14, further comprising: 

determining a first time for performing a first operation at a first of said plurality of 

nodes; 

determining a second time for performing a second operation at a second of said plurality 
of nodes; 

analyzing first local filtered data at said first node using an identifier associated with a 
transaction producing a first transaction data set; 

analyzing second local filtered data at said second node using said identifier producing a 
second transaction data set; and 

determining that said first and second transaction data sets are messages received by each 
of said first and second nodes for performing different operations for a same transaction at 
different points in time. 
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16. (original) The method of Claim 15, further comprising: 

determining a processing path of operations performed by one or more of said plurality of 
nodes in connection with servicing said transaction in accordance with said identifier associated 
with said transaction. 

17. (original) A computer program product method for obtaining data about a transaction 
in a computer system comprising: 

executable code that receives at least one message at each of a plurality of nodes in 
connection with performing a service of said transaction; 

executable code that filters said at least one message at each of said plurality of nodes in 
accordance with a current set of one or more rules producing local filtered data at each of said 
plurality of nodes; and 

executable code that processes, at each of said plurality of nodes, said local filtered data 
producing aggregated data about said transaction. 

18. (original) The computer program product of Claim 17, wherein each of at least a 
portion of said plurality of nodes is one of: a single instance of a web service, an application 
server, a host computer, a geographical computer site. 

19. (original) The computer program product of Claim 17, wherein at least two nodes of 
said plurality of nodes are associated with performing processing for a single application. 

20. (original) The computer program product of Claim 17, wherein said executable code 
that filters at each of said plurality of nodes performs filtering in real-time while said each node 
is servicing a request. 



Applicant 
Serial No. 
Filed 
Page 



Jason DeBettencourt et al. 
10/648,982 
August 27, 2003 
6 of 9 



Attorney's Docket No.: 17542-003001 



21 . (original) The computer program product of Claim 20, further comprising: 
executable code that collects said aggregated data from each of said plurality of nodes 
about said transaction. 



22. (original) The computer program product of Claim 20, further comprising: 
executable code that collects said aggregated data from a portion of said plurality of 

nodes about said transaction. 

23. (original) The computer program product of Claim 17, further comprising: 
executable code that aggregates XML message data received at each of said plurality of 

nodes, said plurality of nodes being a distributed network of service node peers. 

24. (original) The computer program product of Claim 22, wherein each of said plurality 
of nodes is an application performing an operation in connection with servicing a transaction. 

25. (original) The computer program product of Claim 24, wherein said current set of 
rules is evaluated in accordance with each received message. 



26. (original) The computer program product of Claim 25, further comprising: 
executable code that revises said current set of rules at one of said plurality of nodes 

while said one node is servicing a request. 

27. (original) The computer program product of Claim 25, wherein each rule in said 
current set of rules includes a condition portion and an action portion, and the computer program 
product further comprising: 

executable code that evaluates a condition portion of a first rule in accordance with a first 
received message wherein said condition portion evaluates to false and said action portion is not 
performed; and 
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executable code that evaluates said condition portion of said first rule in accordance with 
a second received message wherein said condition portion evaluates to true and said action 
portion is performed. 

28. (original) The computer program product of Claim 27, wherein said action portion 
includes performing at least one of: outputting data to a destination and invoking an application. 

29. (original) The computer program product of Claim 17, wherein a transaction is 
determined in accordance with at least one of: a transaction identifier, a customer identifier, and 
a timestamp included in each of said at least one message. 

30. (original) The computer program product of Claim 29, wherein said executable code 
that processes includes executable code that analyzes said local filtered data at at least a portion 
of said plurality of nodes in accordance with a time-coherency and key- value pattern matching. 

3 1 . (original) The computer program product of Claim 30, further comprising: 
executable code that determines a first time for performing a first operation at a first of 

said plurality of nodes; 

executable code that determines a second time for performing a second operation at a 
second of said plurality of nodes; 

executable code that analyzes first local filtered data at said first node using an identifier 
associated with a transaction producing a first transaction data set; 

executable code that analyzes second local filtered data at said second node using said 
identifier producing a second transaction data set; and 

executable code that determines that said first and second transaction data sets are 
messages received by each of said first and second nodes for performing different operations for 
a same transaction at different points in time. 
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32. (original) The computer program product of Claim 31, further comprising: 
executable code that determines a processing path of operations performed by one or 

more of said plurality of nodes in connection with servicing said transaction in accordance with 
said identifier associated with said transaction. 

33. (new) The method of Claim 1, wherein at least some of the processing of the local 
filtered data is performed at each of the plurality nodes. 

34. (new) The method of Claim 4, wherein the filtering is performed in real time. 



